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DETAILED ACTION 

This action is responsive to the Request for Continued Examination filed 24 July 
2006. Claims 28-34 and 44 are cancelled. Claims 47-50 are new. Claims 1-27, 35-43, 
and 45-50 are currently pending. 

Response to Arguments 

Applicant's arguments filed 24 July 2006 have been fully considered but they are 
not persuasive. 

Applicant argued that the cited art of Doyle et al (US Patent #6,968,453) and 
Hind (US Patent #6,976,163, included by reference in Doyle) do not cite the claimed 
limitation "wherein the at least one party communicates with the device to perform the 
permitted activity, after the role certificate is embedded in said device" of claims 1, 20, 
41 , and 49, or the limitation "wherein the at least one party communicates with the 
device to perform the permitted activity, only after the role certificate is embedded in 
said device" of claim 26. The examiner notes that claims 1 , 20, 41 , and 49 only require 
that some communication take place after the certificate is embedded, whereas claim 
26 requires the communications to take place exclusively after the embedding. Thus, 
the cited art of Doyle et al applies to claims 1, 20, 41, and 49, because the embedding 
does not take place after all communications are finished. Furthermore, Doyle et al 
disclose (at column 1 1 , lines 18-40) that the security core (which stores the certificates) 
can be manufactured to include a single code base capable of providing multiple levels 
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of functionality. The examiner interprets this to mean that the device can be 
manufactured with a default generic role certificate for multiple levels of functionality. 

Claim Rejections - 35 USC § 102 

The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claims 1-27, 35-43, and 45-50 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Doyle et al (US Patent #6,968,453). 

With regards to claim 1, Doyle et al disclose a method, comprising: 

embedding a role certificate in a device, wherein the role certificate 
identifies at least one permitted activity that at least one party is allowed to 
perform with respect to the device, and wherein the role certificate is generated 
by a Certification Authority (CA); (note figure 1 and associated description; note 
column 9, line 54; note column 7, lines 13-17; note column 11, lines 8-40; note 
figures 4 & 6) 

embedding at least information regarding a public key in said device the 
public key corresponding to the private key used by the CA to sign the role 
certificate; and (note figure 1 and associated description; note column 9, line 54; 
note column 8, lines 1-30; note column 9, lines 46-67; note column 7, lines 13- 
17; note column 11, lines 8-40; note figures 4 & 6) 
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running the device so as to verify the role certificate using said information 
regarding the CA public key so that said at least one permitted activity can be 
activated within the device by said at least one party if the role certificate is 
verified, (note figure 1 and associated description; note column 5, lines 1-24; 
note column 6, lines 28-37; note column 1 1 , lines 8-40; note figures 4 & 6) 

wherein the at least one party communicates with the device to perform 
the permitted activity, after the role certificate is embedded in said device, (see 
arguments above; note column 11, lines 8-40 - third party upgrading implies 
communication with the third party) 

With regards to claims 20 and 49, Doyle et al disclose a role certificate 
mechanism, comprising: 

memory within containing a role certificate, wherein the role certificate is 
configured to identify at least one activity permitted to be activated within a 
device in response to a communication, and further wherein the memory 
contains information regarding a first key corresponding to a second key used to 
sign the role certificate; and (note figure one and associated description; note 
column 7, liens 13-17; note figures 4 & 6) 

processor configured to run the device so as to verify the role certificate 
using said information regarding the first key so that said at least one permitted 
activity can be activated within the device, (note figure one and associated 
description; note column 5, lines 1-24; note figures 4 & 6) 
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wherein the role certificate mechanism is configured to receive the 
communication after the role certificate is embedded in said mechanism, (see 
arguments above; note column 1 1 , lines 8-40 - third party upgrading implies 
communication with the third party) 

With regards to claim 26, Doyle et al disclose an apparatus, comprising: 
Means for embedding a role certificate in a device, wherein the role certificate identifies 
at least one permitted activity that is allowed to be performed by at least one party with 
respect to the device, and wherein the role certificate is generated by a Certification 
Authority (CA); (note figure 1 and associated description; note column 5, lines 3-5; note 
column 6, lines 46-54; note column 7, lines 13-17; note figures 4 & 6) 
Means for embedding information regarding a public key in said device, the public key 
corresponding to the private key used by the CA to sign the role certificate; and( note 
figure 1 and associated description; note column 5, lines 47-52; note column 9 , lines 
46-67; note column 18, lines 66-67 and column 19, lines 1-34) 
Means for running the device so as to verify the role certificate using said information 
regarding the CA public key so that said at least one permitted activity can be activated 
within the device by said at least one party; (note figure 1 and associated description; 
note column 6, lines 28-37; notes column 7, lines 1-17; note figures 4 & 6) 
Wherein the at least one party communicates with the device to perform the permitted 
activity, only after the role certificate is embedded in said device, (see arguments 
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above; note column 1 1 , lines 8-40 - third party upgrading implies communication with 
the third party and the device can be manufactured to include a generic role certificate) 

With regards to claim 41, Doyle et al disclose a method comprising: 

embedding a role certificate applicable to a plurality of devices in an 
individual device, wherein the role certificate specifies at least one permitted 
activity that is allowed to be performed by at least one party as applied to the 
plurality of devices, and wherein the role certificate is generated by a Certification 
Authority (CA); (note figure 1 and associated description; note column 5, lines 1- 
5; note column 7, lines 13-17; note column 9, lines 46-67; note column 12) 

embedding at least information regarding a public key applicable to the 
plurality of devices in said individual device, the public key corresponding to the 
private key used by the CA to sign the role certificate; and (note figure 1 and 
associated description; note column 5, lines 1-5; note column 7, lines 13-17; note 
column 9, lines 46-67; note column 12) 

running the individual device so as to verify the role certificate using said 
information regarding the CA public key so that said at least one permitted 
activity can be activated within the individual device by said at least on party if 
the role certificate is verified, (note figure 1 and associated description; note 
column 5, lines 1-5; note column 7, lines 133-17; note column 9, lines 46-67; 
note column 12; note column 6, lines 28-37) 
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wherein the at least one party communicates to perform the permitted 
activity, after the role certificate is embedded in said individual device, (see 
arguments above; note column 1 1 , lines 8-40 - third party upgrading implies 
communication with the third party) 
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As per claim 2, which is dependent on claim 1 , Doyle et al. teaches a method as 
defined in claim 1 , wherein the role certificate includes information regarding a control 
security level for said device so that the device only allows said at least one permitted 
activity to be a type of action which is within the security level of the device as defined 
by the role certificate (note Fig. 1 and associated description. in the specification - the secure core 
150 is capable of performing the function; also note column 5, tines 1*24; also note column 7, lines 13- 
1 7; also note column 1 1, lines 8-40 - third party capability upgrading means described; also note Fig. 4 & 
Fig. 6 - mechanism for dealing with third party role based functionality is depicted; also note column 1 1, 
tine 18 -the "referenced inventions" points to [col. 8:6-1 1] the patent of Hind et al. US 6,976.163 that 
teaches the use of role certificate). 

As per claim 3, which is dependent on claim 2, Doyle et al. teaches a method as 
defined in claim 2 f wherein the security level defined by the role certificate allows a 
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type of software code to be downloaded, and/or installed, and/or run on said device by 
said at least one party (note Fig. 1 and associated description in the specification - the functionality 
can be implemented using the elements depicted in the diagram; also note column 5, lines 1-24; also 
note column 7, lines 13-17 -the certificate is usually generated by CA; also note column 1 1. lines 8-40 - 
third party capability upgrading means described; also note Fig. 4 & Fig. 6- mechanism for dealing with 
third party role based functionality is depicted; also note column 1 1, line 18 - the "referenced inventions" 
points to (col. 8:6-11] the patent of Hind et al. US 6.976, 163 that teaches the use of rote certificate). 

As per claim 4, which is dependent on claim 3, Doyle et al. teaches a method as 
defined in claim 3, wherein the type of software code is from the group of types of 
software code consisting of test code, production code and special code (note Fig. 1 and 
associated description in the specification - the functionality can be implemented using the elements 
depicted in the diagram; also note column 5, lines 1-31; also note column 23, lines 15-67; also note 
column 1 1, lines 8-40 - third party capability upgrading means described; also note column 11, line 18 - 
the "referenced inventions" points to (col. 8:6-1 1] the patent of Hind et al. US 6.976, 163 that teaches the 
use of role certificate). 

As per claim 5, which is dependent on claim 4, Doyle et al. teaches a method as 
defined in claim 4, wherein the special code can be code linked to a specific at least 
one party (note Fig. 1 and associated description In the specification ~ the functionality can be 
implemented using the elements depicted in the diagram; also note column 5. lines 1-31; also note 
column 23, lines 15-67; also note column 1 1 t lines 8-40 - third party capability upgrading means 
described). 

As per claim 6, which is dependent on claim 3, Doyle et al. teaches a method as 
defined in claim 3, wherein the role certificate further contains information with regard 
to a specific party of said at least one party that can download, and/or install, and/or 
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run said type of software code (note Fig. 1 and associated description in the specification - the 
functionality can be implemented using the elements depicted in the diagram: also note column 5. lines 
U31; also note column 23, lines 15-67; also note column 7. lines 13-17; also note column 5, lines 41-44 

- a user profile may contain role information; also note column 1 1, lines 8-40 - third party capability 
upgrading means described). 

As per claim 7, which is dependent on claim 1, Doyle et al. teaches a method as 
defined in claim 1, wherein the role certificate further contains information with regard 
to a specific party of said at least one party that can activate the at least one permitted 
activity Within the device (note Fig. 1 and associated description in the specification - the 
functionality can be implemented using the elements depicted in the diagram; also note column 5. lines 
1*31; also note column 23, lines 15-67; also note column 7, lines 13-17; also note column 11, lines 8-40 

- third party capability upgrading means described: also note Fig. 4 & Fig. 6 - mechanism for dealing with 
third party role based functionality is depicted). 

As per claim 8, which is dependent on claim 7, Doyle et al. teaches a method as 
defined in claim 7 t wherein said information with regard to a specific party is a hash of 
information identifying said specific party's public key, and wherein the device validates 
said specific party by receiving said information identifying said specific party's public 
key, and hashing this information and comparing the hash value to the hash value 
contained in the role certificate so that if the hash values are equal, then the specific 
party is permitted to activate the at least one permitted activity (note Fig. 1 and associated 
description in the specification - the functionality can be implemented using the elements depicted in the 
diagram; also note column 5, lines 1-31; aiso note column 23, lines 15-67: also note Fig. 3 and 
associated description in the specification; also note column 6, lines 1-27: also note column 1 1, lines 8- 
40 • third party capability upgrading means described) . 
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As per claim 9, which is dependent on claim 7. Doyle et al. teaches a method as 
defined in claim 7, wherein said specific party is a group of entities (note Fig. 1 and 
associated description in the specification - the functionality can be implemented using the elements 
depicted in the diagram; also note column 7, lines 13-17; also note column 1 1. lines 8-40 - third parly 
capability upgrading means described; also note Fig. 4 & Fig. 6 - mechanism for dealing with third party 
role based functionality is depicted). 

As per claim 10. which is dependent on claim 1, Doyle et al. teaches a method as 
defined in claim 1, wherein the embedding of the role certificate into the device is 
performed after the information regarding the public key of the CA is embedded into 
the device (note Fig. 1 and associated description in the specification - the functionality can be 
implemented using the elements depicted in the diagram; also note column 7 t lines 13-17; also note Fig. 
4 £ Fig. 6 - mechanism for dealing with third party role based functionality is depicted). 

As per claim 1 1 ( which is dependent on claim 10, Doyle et at. teaches a method 
as defined in claim 1, wherein the information regarding the CA public key is 
embedded in the device in a tamper resistant area (note Fig. 1 end associated description in 
the specification - the functionality can be implemented using the elements depicted in the diagram; also 
note column 8, line 4 - protected area implies tamper proof; also note column 1 1, tine 5). 

As per claim 12, which is dependent on claim 11, Doyle et al. teaches a method 
as defined in claim 1 1 , wherein the tamper resistant area of the device is a portion 
memory in the device such that any modification of information stored therein can be 
ascertained (note Fig. 1 and associated description in the specification - the functionality can be 
implemented using the elements depicted in the diagram; also note column 8, tine 4 - protected area 
implies tamper proof memory; also note column 11, line 5). 
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As per claim 13, which is dependent on claim 1 , Doyle et al. teaches a method as 
defined in claim 1, wherein the role certificate contains information which causes said 
device to control the debugging facilities of said device with respect to said at least one 
party (note Fig. 1 and associated description in the specification - the functionality can be implemented 
using the elements depicted in the diagram; also note column 8, line 4 - protected storage can contain 
certificates that perform the function using the I/O port; also note column 7, lines 13-17 -the digital 
certificate may contain the stated information; also note Fig. 4 £ Fig. 6 - mechanism for dealing with third 
party role based functionality is depicted). 

As per daim 14, which is dependent on claim 1 , Doyle et al. teaches a method as 
defined in claim 1 , wherein the CA is a root CA (note Fig. 1 and associated description in the 
specification - the functionality can be implemented using the elements depicted in the diagram; also 
note column 9, lines 46-67; also note Fig. 4 & Fig, 6- mechanism for dealing with third party role based 
functionality is depicted). 

As per claim 15, which is dependent on claim 1 , Doyle et al. teaches a method as 
defined in claim 1, wherein the device is a wireless device (note Fig. 1 and associated 
description in the specification - the functionality can be implemented using the elements depicted in the 
diagram; also note column 1, lines 31-31; also note column 2, lines 19-41). 

As per claim 16, which is dependent on daim 1, Doyle et al. teaches a method as 
defined in daim 1, wherein the CA is any entity other than said at least one party (note 
Fig. 1 and associated description in the specification - the functionality can be implemented using the 
elements depicted in the diagram; also note Fig. 4; multiple entity can connect via multiple I/O ports or 
via one port; also note Fig. 4 & Fig. 6 - mechanism for dealing with third party role based functionality is 
depicted). 
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As per claim 17, which is dependent on claim 1, Doyle et al. teaches a method as 
defined in claim 1 , wherein the role certificate may contain any use limitation with 
respect to said at least one permitted activity (note Fig. 1 and associated description in the 
specification - the functionality can be implemented using the elements depicted in the diagram; also 
note column 7, lines 13-17). 

As per claim 18, which is dependent on claim 17, Doyle et al. teaches a method 
as defined in claim 17, wherein said any use limitation includes a time limitation with 
respect to activating said at least one permitted activity (note Fig. 1 and associated 
description in the specification - the functionality can be implemented using the elements depicted in the 
diagram; also note column 7, lines 13-17). 

As per claim 19, which is dependent on claim 1, Doyle et al. teaches a method as 
deemed in claim 1, wherein said information regarding the CA public key is a hash 
value of said CA public key (note Fig. 1 and associated description in the specification - Me 
functionality can be implemented using the elements depicted in the diagram; also note Fig. 3). 
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As per claim 21 , which is dependent on claim 20, Doyle et al. teaches a role 
certificate mechanism as defined in claim 20, wherein the memory has a tamper 
resistant area and wherein said information regarding the first key is stored in said 
tamper resistant area (note Fig. 1 and associated description in the specification - the functionality 
can be implemented using the elements depicted in the diagram; also note column 8, tine 4 - protected 
area implies tamper proof)- 

As per claim 22, which is dependent on claim 20, Doyle et al. teaches a role 
certificate mechanism as defined in claim 20, wherein the role certificate further 
includes information regarding the identity of a third party, and wherein the means for 
verifying the role certificate includes means for reading said third party identity (note Fig. 
1 and associated description in the specification - the functionality can be implemented using the 
elements depicted in the diagram; also note column 8, line 4 - protected area implies tamper pfoof)\ 

wherein the role certificate mechanism further comprises means for receiving 
information from a third party and comparing at least a portion of said received 
information with the read third party identity from said role certificate, and if the 
comparison is the same, allowing said third party to perform said at least one activity 
on said device (note Fig. 1 and associated description in the specification - the functionality can be 
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implemented using the elements depicted in the diagram: also note column 7, lines 1-16; also note 
column 6, tines 28-36; also note column 5, lines 25-31). 

As per claim 23, which is dependent on claim 22, Doyle et al. teaches a role 
certificate mechanism as defined in claim 22, wherein said device is a mobile phone 
(note Fig. 1 and associated description in the speciftcation - the functionality can be implemented using 
the elements depicted in the diagram; also note column 1, lines 31-51; also note column 2, lines 19-41; 
also note Fig. 4 & Fig. 6 - mechanism for dealing with third party role based functionality is depicted). 

As per claim 24, which is dependent on claim 20, Doyle et al. teaches a role 
certificate mechanism as defined in claim 20, wherein said device is a mobile phone 
(note Fig. 1 and associated description in the speciftcation - the functionality can be implemented using 
the elements depicted in the diagram; also note column 1, lines 31-51; also note column 2, lines 19-41; 
also note Fig. 4 & Fig. 6 - mechanism for dealing with third parly role based functionality is depicted). 

As per claim 25, which is dependent on claim 20, Doyle et aL teaches a role 

certificate mechanism as defined in claim 20, wherein said information regarding the 

first key is a hash of said first key (note Fig. 1 and associated description in the specification - me 

functionality can be implemented using the elements depicted in the diagram; also note column 5, lines 

1-31; also note column 23, lines 15-67; also note Fig. 3 and associated description in the specification). 
As per claim 27, which is dependent on claim 26, Doyle et al. teaches an 

apparatus as defined in claim 26, wherein the role certificate includes information 
regarding a control security level for said device so that the means for running the 
device provides that the at least one permitted activity to only be a type of action which 
is within the security level of the device as defined by the role certificate (note Fig. 1 and 
associated description in the specification - the functionality can be implemented using the elements 
depicted in the diagram; also note column 5, lines 4 i-44 - a user can be a third party that is allowed to 

performs a specific role after being authenticated; also note column 6, lines 13-17- the means for 
performing the function is described; also note Fig. 4 & Fig. 6 - mechanism for dealing with third party 

rote based functionality is depicted). 
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As per claim 35, which is dependent on claim 26, Doyle et al. teaches an 
apparatus as defined in claim 26, wherein the information regarding the CA public key 
is embedded in the device in a tamper resistant area (note Fig. 1 and associated description 
in the specification - the functionary can be implemented using the elements depicted in the diagram; 
also note column 5, lines 1-5; also note column 1 1, line 5 - security core is tamper proof). 

As per claim 36, which is dependent on claim 26, Doyle et al. teaches an 
apparatus as defined in claim 26, wherein said information regarding the CA public key 
is a hash of said CA public key (note Fig. 1 and associated description in the specification - the 
functionality can be implemented using the elements depicted in the diagram; also note column 6. tines 
1-27 and Fig. 3 - the hash technique can be utilized to perform the stated function). 

As per claim 37. which is dependent on claim 26, Doyle et al. teaches an 
apparatus as defined in claim 26, wherein the rote certificate contains information 
which causes said device to control the debugging facilities of said device with respect 
to said at least one party (note Fig. 1 and associated description in the specification - toe 
functionality can be implemented using the elements depicted In the diagram; also note column 5. lines 
1-5; also note column 7, lines 13-17 - each certificate can allow different role to include debugging; also 
note column 5, lines 41-44 • a user can have the privilege to perform the stated function as welt). 

As per claim 38, which is dependent on claim 26, Doyle et al. teaches an 
apparatus as defined in claim 26, wherein the device is a wireless device (note Fig. 1 and 
associated description in the specification - the diagram is applicable to ceil phone; also note column 6, 
line 67; also note column 23, lines 5-14; also note column 1 t line 39; also note column 3, lines 15-23). 
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As per claim 39, which is dependent on claim 26, Doyle et al. teaches an 
apparatus as defined in claim 26, wherein the role certificate may contain any use 
limitation with respect to said at least one permitted activity (note Fig. 1 and associated 
description in the specification - the functionality can be implemented using the elements depicted in the 
diagram; also note column 5, lines 1-5; also note column 7, lines 13-17- the technique described can be 
used to perform the stated function). 

As per claim 40, which is dependent on claim 39, Doyle et al. teaches an 
apparatus as defined in claim 39, wherein said any use limitation includes a time 
limitation with respect to activating said at least one permitted activity (note Fig. 1 and 
associated description in the specification - the functionality can be implemented using the elements 
depicted in the diagram; also note column 5, lines 1 -5; also note column 7, lines 13-17 -the technique 
described can bo used to perform the stated function; also note column 8, tines 20-24; also note column 
15, lines 6-15). 

As per claim 42, which is dependent on claim 41, Doyle et al. teaches the 
method of claim 41, wherein said individual device is also embedded with at least one 
different role certificate (note Fig. 1 and associated description in the specification - the functionality 
can be implemented using the elements depicted in the diagram; also note column 5, lines 1-5; also note 
column 7 t tines 13-17 -the technique described can be used to perform the stated function: note column 
9, lines 46-67; also note column 12). 

As per claim 43, which is dependent on claim 42, Doyle et aL teaches method of 
claim 42, wherein one of the at least one different role certificate specifies at least a 
third party or a group or a device, and wherein the at least one permitted activity is not 
conducted rf the one of the at least one different role certificate does not match said at 
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least a third party or a group or a device (note Fig. 1 and associated description in the 
specification - the functionality can be implemented using the elements depicted in the diagram; also 
note column 5, lines 1-5; also note column 7, lines 13-17 - the technique described can be used to 
perform the stated function; note column 9, lines 46-67; also note column 12; also note column 6, lines 
28-37). 

As per claim 45, which is dependent on claim 1, Doyle et al. teaches method of 
claim 1, wherein one of the role certificate includes a name of the Certification Authority 
that issued the certificate, a serial number, and an expiration date (note column 11. line 18- 
the 'referenced inventions' points to [col. 8:6- 11] the patent of Hind et al. US 6,976, 1 63 that teaches the 
use of role certificate. This patent is incorporated in Doyle 's invention; also note the abstract of Hind at et. 
for a description on use of rote certificate). 

As per claim 46, which is dependent on claim 1, Doyle et al. teaches method of 
claim 1, wherein the at least one party performs the at least one permitted activity by 
establishing a wireless connection to the device, and wherein the role certificate also 
identifies the at least one party (note column 11, line 18- the 'referenced inventions" points to [col. 
8:6- 1 1] the patent of Hind et al. US 6,976, 163 that teaches the use of role certificate. This patent is 
incorporated in Doyle's invention; also note the abstract of Hind at el. for a description on use of role 
certificate). 

With regards to claims 47 and 48, Doyle et al disclose the method of claim 1 and 
mechanism of claim 20, wherein the role certificate is embedded in said device during 
manufacture, (column 1 1 , lines 18-40 - the security core that stores the certificates can 
be manufactured to include a code base providing multiple functionality levels - this is 
analogous to including a role certificate providing multiple functionality levels when the 
core is manufactured) 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Virgil Herring whose telephone number is (571) 272- 
8189. The examiner can normally be reached on Monday-Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571) 272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Virgil Herring 



Examiner 
Art Unit 21 32 
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